{"id":1134164,"url":"https://alion.io/job/bitdefender-associate-security-content-engineer","title":"Associate Security Content Engineer","company":{"id":11797,"name":"Bitdefender","domain":"bitdefender.com","url":"https://alion.io/company/bitdefendersrl","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Product","role_family":"Product","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":74000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":571},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Graylog","optional":false},{"name":"n8n","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-23T06:16:46Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-12T22:46:14Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit https://www.bitdefender.com\nSecurity Content Engineer - Managed Detection and Response\nOur mission at Bitdefender is to reduce risk to our customers’ businesses so they can confidently pursue their goals. We are committed to delivering real, effective cybersecurity value-no fluff, no gimmicks. To support this mission, we are expanding our team with a Security Content Engineer role.\nAbout Us\nBitdefender’s Managed Detection and Response (MDR) service is a rapidly growing division dedicated to protecting customers from real-world threats. Our team includes passionate cybersecurity professionals from around the globe, including seasoned defenders from military, intelligence, and leading cybersecurity organizations. We operate in a 24/7 environment, managing high-impact security incidents and continuously improving our defenses.\nWe believe in trust, accountability, and strong processes. Our team prioritizes collaboration and fosters a culture of ownership and problem-solving. If you are passionate about cybersecurity and want to work with others who take the mission seriously, this is the place for you.\nAbout the Role\nThe Security Content Engineer plays a critical role in proactively identifying and mitigating threats across customer environments by developing and maintaining high-quality detection, investigation, and response content.\nThis role also supports the automation of SOC operations by designing and maintaining workflows and playbooks that improve triage, investigation, response, and overall analyst efficiency.\nThis is a full-time position aligned with a four-day, ten-hour schedule within Monday through Friday, with occasional on-call or weekend coverage depending on team needs.\nYou Will\nDesign and develop detection content that drives high-fidelity alerts and investigations.\nCreate and refine analytics rules to identify emerging threats and suspicious behavior.\nDesign, build, test, document, and maintain SOC automation and response playbooks using n8n.\nDevelop automated workflows supporting detection triage, enrichment, investigation, customer verification, response actions, and escalation.\nWork with workflow management and orchestration platforms, such as Temporal and n8n, to support reliable and scalable security operations.\nIntegrate security platforms, data sources, APIs, and internal services into automated SOC workflows.\nMaintain and tune customer environment baselines to reduce false positives and improve alert accuracy.\nConduct quality assessments on operational data to ensure reliability and relevance.\nDevelop threat-hunting queries and custom detection content based on threat intelligence.\nCollaborate with MDR analysts to gather feedback and continuously improve detection content, automation, and playbooks.\nDefine and maintain data parsers to ensure consistent data normalization and availability.\nSupport investigations through ad hoc content development, workflow development, and detection tuning.\nReview and respond to content-related tickets, automation requests, and feature requests.\nMonitor automation performance, troubleshoot workflow failures, and improve playbook reliability.\nAbout You\nYou are a hands-on engineer with a passion for security, detection engineering, threat hunting, and SOC automation. You enjoy solving difficult operational problems and turning analyst knowledge into repeatable, scalable workflows that improve customer security outcomes.\nYou Bring\nHands-on experience developing SOC automation workflows and security playbooks using n8n.\nExperience working with workflow management or orchestration platforms, such as Temporal.\nExperience creating automation for security triage, enrichment, investigation, and response processes.\nExperience integrating security tools and data sources through APIs, webhooks, and other automated methods.\nExperience working with detection and response platforms, such as SIEM, EDR, XDR, or SOAR technologies.\nStrong understanding of threat-detection logic, signal-to-noise tuning, and false-positive reduction.\nFamiliarity with common attacker techniques, including the MITRE ATT&CK framework, and corresponding defensive countermeasures.\nKnowledge of log formats and telemetry across multiple operating systems and security technologies.\nExperience designing and implementing parsers for structured and unstructured data.\nScripting experience supporting security automation, detection engineering, and content development.\nAbility to troubleshoot complex workflows and identify failures across interconnected systems.\nAbility to collaborate across teams and communicate technical information effectively.\nBonus Qualifications\nExperience with Bitdefender GravityZone, Graylog, N8N, or Swimlane.\nBackground in SOC operations or security content management within an MDR or MSSP environment.\nExperience developing and refining detection and automation KPIs, such as baseline adherence, false-positive rates, playbook success rates, and analyst time savings.\nFamiliarity with software development practices, including version control, testing, peer review, and deployment pipelines.\nExperience translating analyst investigation processes into documented and reusable automated playbooks.","description_format":"text","description_chars":6092,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Security Operations"],"lifecycle":[{"event":"open","at":"2026-09-23T06:29:29Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.85,"p_room":1,"age_days":19,"expected_fill_days":57,"reasons":["conf:0","velocity","win:early","comp:junior"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/bitdefender-associate-security-content-engineer","json_url":"https://alion.io/job/bitdefender-associate-security-content-engineer.json","meta":{"generated_at":"2026-10-13T01:11:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1705,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11797},"rest":"https://alion.io/mcp/rest/get_company?id=11797"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbitdefender-associate-security-content-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbitdefender-associate-security-content-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbitdefender-associate-security-content-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bitdefender-associate-security-content-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbitdefender-associate-security-content-engineer"}]}